agisoft-delighter

LOW

maintainer dobedobedo 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a prebuilt binary tarball from Agisoft's official S3 bucket, which is plausibly their own release infrastructure; the package installs only data and wrapper scripts, with no evidence of malicious behavior or remote code execution.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt binary tarball from Agisoft's official S3 bucket, which is plausibly their own release infrastructure; the package installs only data and wrapper scripts, with no evidence of malicious behavior or remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yu-Hsuan Tu <dobe0331 at gmail dot com>
    
      2_pkgname=delighter
    
      3pkgname=agisoft-${_pkgname}
    
      4pkgver=2.3.2
    
      5pkgrel=1
    
      6pkgdesc="A free stand-alone tool designed to remove shadows from model textures"
    
      7arch=('x86_64')
    
      8url="https://www.agisoft.com/"
    
      9license=('custom:Agisoft EULA' 'custom')
    
      10makedepends=('imagemagick')
    
      11provides=('agisoft-delighter')
    
      12options=('!strip')
    
      13install=${pkgname}.install
    
      14source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"
    
      15	"agisoft-delighter-icon-encoded.txt")
    
      16sha256sums=('ff3317b73af0d2bb1bb958885fbc3705d57cc35776ef5727a5439797b118d55a'
    
      17            '6cc74a4ac8ec776ebea5eff2383ddaf2520bb0a47f7d2135a62277dbd9206921')
    
      18
    
      19build() {
    
      20    # Create desktop entries
    
      21    echo "[Desktop Entry]
    
      22Type=Application
    
      23Name=Agisoft De-Lighter
    
      24Comment=Remove shadows from model textures
    
      25Exec=agisoft-delighter
    
      26MimeType=application/agisoft.dlz
    
      27Icon=agisoft-delighter
    
      28Terminal=false
    
      29Categories=Science;ImageProcessing" > "$srcdir/agisoft-delighter.desktop"
    
      30
    
      31    # Create Delighter MIME type file
    
      32    echo '<?xml version="1.0" encoding="UTF-8"?>
    
      33<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
    
      34    <mime-type type="application/agisoft.dlz">
    
      35        <comment>Delighter Projects</comment>
    
      36        <icon name="application-agisoft-dlz"/>
    
      37        <glob-deleteall/>
    
      38        <glob pattern="*.dlz"/>
    
      39    </mime-type>
    
      40</mime-info>' > "$srcdir/${pkgname}-mime.xml"
    
      41
    
      42    # Create 128x128 application icons
    
      43    base64 -d "$srcdir/agisoft-delighter-icon-encoded.txt" > "$srcdir/agisoft-delighter_128.png"
    
      44    
    
      45    # Create 128x128 mime icons
    
      46    cp "$srcdir/agisoft-delighter_128.png" "$srcdir/application-agisoft-dlz_128.png"
    
      47    
    
      48    # Create icons for other resolutions
    
      49    for _res in 16 32 48 64; do
    
      50        magick "$srcdir/agisoft-delighter_128.png" -resize ${_res}x${_res} "$srcdir/agisoft-delighter_${_res}.png"
    
      51        magick "$srcdir/application-agisoft-dlz_128.png" -resize ${_res}x${_res} "$srcdir/application-agisoft-dlz_${_res}.png"
    
      52    done
    
      53    
    
      54    # Create executables for /usr/bin
    
      55    echo "#!/bin/bash
    
      56/opt/agisoft/${_pkgname}/delighter.sh \$@" > "$srcdir/agisoft-delighter"
    
      57}
    
      58
    
      59package() {
    
      60    # Move extracted folder to opt
    
      61    cd "$pkgdir"
    
      62    mkdir -p "opt/agisoft"
    
      63    mv "${srcdir}/${_pkgname}" "${pkgdir}/opt/agisoft/"
    
      64
    
      65    # Install licenses
    
      66    cd opt/agisoft/${_pkgname}
    
      67    install -Dm644 eula.txt "$pkgdir/usr/share/licenses/$pkgname/eula.txt"
    
      68    mv licenses "$pkgdir/usr/share/licenses/$pkgname"
    
      69    rm eula.txt
    
      70
    
      71    # Move desktop entries
    
      72    mkdir -p "${pkgdir}/usr/share/applications/"
    
      73    mv "${srcdir}/agisoft-delighter.desktop" "${pkgdir}/usr/share/applications/"
    
      74
    
      75    # Create MIME type
    
      76    mkdir -p "${pkgdir}/usr/share/mime/packages"
    
      77    mv "${srcdir}/${pkgname}-mime.xml" "${pkgdir}/usr/share/mime/packages"
    
      78
    
      79    # Move icons
    
      80    for _res in 16x16 32x32 48x48 64x64 128x128; do
    
      81        mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/"
    
      82        mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/"
    
      83        mv "$srcdir/agisoft-delighter_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/agisoft-delighter.png"
    
      84        mv "$srcdir/application-agisoft-dlz_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-dlz.png"
    
      85    done
    
      86    
    
      87    # Create executables in /usr/bin
    
      88    install -Dm755 "$srcdir/agisoft-delighter" "$pkgdir/usr/bin/agisoft-delighter"
    
      89
    
      90    # Set correct permission
    
      91    chmod -R g=u "$pkgdir/opt/agisoft/${_pkgname}"
    
      92    chmod -R o=u "$pkgdir/opt/agisoft/${_pkgname}"
    
      93    chmod -R g-w "$pkgdir/opt/agisoft/${_pkgname}"
    
      94    chmod -R o-w "$pkgdir/opt/agisoft/${_pkgname}"
    
      95    chmod -R g=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
    
      96    chmod -R o=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
    
      97    chmod -R g-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
    
      98    chmod -R o-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
    
      99}
    
      100

Changes since previous scan

--- PKGBUILD @ 2026-09-11 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -1,8 +1,8 @@
 # Maintainer: Yu-Hsuan Tu <dobe0331 at gmail dot com>
 _pkgname=delighter
 pkgname=agisoft-${_pkgname}
-pkgver=2.3.1
-pkgrel=3
+pkgver=2.3.2
+pkgrel=1
 pkgdesc="A free stand-alone tool designed to remove shadows from model textures"
 arch=('x86_64')
 url="https://www.agisoft.com/"
@@ -13,7 +13,7 @@
 install=${pkgname}.install
 source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"
 	"agisoft-delighter-icon-encoded.txt")
-sha256sums=('d14d20e11e44f91698d18a9d6c40cb37502763a5e7e665372b6fa6b73a7e4862'
+sha256sums=('ff3317b73af0d2bb1bb958885fbc3705d57cc35776ef5727a5439797b118d55a'
             '6cc74a4ac8ec776ebea5eff2383ddaf2520bb0a47f7d2135a62277dbd9206921')
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 03:21:42	Medium	1
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2